MAL-2025-165681 Malicious code in saku-au-idaduasuffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874abdf8212ab409b7f05d040e281f0f691258049dfbcf87d68d48841b9db392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157817 Malicious code in kuinsu-uki-vilakamnaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66aa808858fb4481ab67d0dd1d29acd61ccd5f39bcdc0bf449be455cd08617dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159523 Malicious code in manaf-marz-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd3f45145979c8ecd1593778a84e3191fc0eeab0822669f6c219b65d0c5041b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153334 Malicious code in avminh-afai-fauofaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d764ed7f10ce569873834ae4e66377a1290ce59c6fde98b262b205ed6a5701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167497 Malicious code in teagood-nalikami92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bade08da66605664564ce88ba6d88dfbea4689fec4172be628bf1bb636e0290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156504 Malicious code in infi-gfobai-jigga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a16ff404f050987a879a64484fc30e852d65469b1a438ef3736f5873f124aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f26851dec6c8b9426f006478c040ab8ece57b03e83d4423196da310b83e46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami135 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e8368f4b68620ca1dc198b9a38efe40eef714c6efc0f5fe7942e53e85a943e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uragifa-afaoti-uto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcca8fcf5fa3719f2c6e79d0939060671d69a87d08559fcc50d59c93fc62ed35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiari-agomi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b79ddccebf628aa517032eb2420ce52f383682d928cea66e2e4b9ab48069aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a87b78592ad118ba9ec77916e7ce7e137ce8025f9c87ddaf7aae07f56f0ec3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45da3f9ac5e03557462eca9fed58c590e4f612a3333ee984b0709f49b1d884ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalalio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5952e2cd5a67b8a15c3f207cee7721b8593e38de1b36a3c6033ff793ee36827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d809ffe58acb802a1e397eee0b390b1cd696efdca0ce0d86b3731c9bf89ec4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sfdassr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3289c28eecd88be6b766f382483455932febb65f92813548083ee64c08187c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09866bdfa45e78a9c24137e4f1b5e6b9f19886621df8e960d735881b5d79fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-mitui-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac44cc401f29535c78d617fc4ad6eef42d566ddaf12fc8a0c5db3d61a45cc5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-dofo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea3facd54021fb0c0e1d89797d3d91b9d705ba4e7b7a686e788ee9d759eace4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/savdfhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f707c993fa6f6be4f3cdfe52bfd1ba6e7bc6b9fac5ab4be062cc62e383d4c6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-butan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bca2af25fb1f1f4076d2a677b0c8f11a6e00702e8a81b863d19956a4785b3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...